2024

A vulnerability was found in Cogites eReserv 7.7.58. It has been classified as problematic. This affects an unknown part

Directory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote attackers to obtain sensitive

The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerabilit

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200

An issue was discovered in the Feed Me plugin 4.6.1 for Craft CMS. It allows remote attackers to cause a denial of servi

Cross Site Scripting (XSS) vulnerability in Craft CMS Audit Plugin before version 3.0.2 allows attackers to execute arbi

Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the width and heig

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it poss

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a d

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allow

A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unautho

A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. Affected by this issue is some unknow

Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_proce

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. Affected by

Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is

Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate pri

A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown proce

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnera

The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and N

CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password a

react-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set.

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.

Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote at

Softing TH SCOPE through 3.70 allows XSS.

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Security-sensitive parts of the Python H

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and c

A vulnerability, which was classified as problematic, was found in CodeAstro Simple Student Result Management System 5.6

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.5.5. Affected by this issue is the

A vulnerability classified as problematic was found in Rebuild up to 3.5.5. Affected by this vulnerability is the functi

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Serv

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenti

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBu

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on W

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbit

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter.

Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.'

Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter.

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cro

A stored cross-site scripting (XSS) vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 allows atta

A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.

DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key.

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm.

Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0

Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting (XSS) via the 'Menu Name' and 'Description' fi